arXiv:2611. 06303v1 Announce Type: cross Abstract: The halting problem asks whether a program eventually halts, with unrestricted resources.
By Sergey Salishev
arXiv:2606. 13621v1 Announce Type: new Abstract: Shielded reinforcement learning is typically presented as a runtime safety mechanism that compiles temporal-logic specifications into automata restricting an agent's actions.
By Achraf Hsain, Sultan Almuhammadi
arXiv:2605. 07032v2 Announce Type: replace-cross Abstract: The evolution of generative models from next-token predictors to autonomous engines of complex systems necessitates rigorous safety hardening.
By Montaser Mohammedalamen, Kevin Roice, Reginald McLean, Alyssa Lefaivre \v{S}kopac
The paper examines the vulnerability of open‑weight large language model safeguards that aim to block harmful usage by assuming new harmful behavior arises only through fine‑tuning. It demonstrates that simple, low‑cost attacks—abliteration and prefilling—can significantly increase attack success rates across multiple benchmarks, and proposes an abliteration‑resistant tuning (ART) method that mitigates these attacks. The study shows that safeguarding defenses must be evaluated against a broader range of attack strategies beyond fine‑tuning.
By Kevin Kuo, Virginia Smith, Chhavi Yadav
The paper investigates whether increased computational resources for an attacker can make adversarial attacks transferable across all defenders. It finds that for classification tasks, a quadratic resource gap guarantees either a transferable attack or a defense, whereas for generative tasks this guarantee fails. The authors also show that a defense that adds computation after seeing the input can be provably stronger than any fixed-model defense, suggesting that inference-time compute can enhance robustness.
By Greg Gluch, Shafi Goldwasser, Anastasiia Struss
Shielded reinforcement learning is typically presented as a runtime safety mechanism that compiles temporal-logic specifications into automata restricting an agent's actions. We argue this is the wrong product.